On April 17, 2023, the Government issued Decree 13/2023/ND-CP on personal data protection (Decree 13) with the goal of meeting requirements on protecting personal data rights, preventing acts of infringing personal data, and affecting the rights and interests of individuals and organizations. The followings are some outstanding contents of Decree 13:
(i) Defining and classifying personal data;
(ii) Stipulating the rights of Data Subjects;
(iii) Stipulating responsibilities of Personal Data Controllers, Personal Data Processors, and Personal Data Controller-cum-Processors in the process of controlling and processing personal data;
(iv) Stipulating the abroad transfer of personal data;
(v) Stipulating measures to protect personal data.
